Skip to main content
jd653687
Visitor III
August 11, 2016
Solved

Public ip to gast lan

  • August 11, 2016
  • 1 reply
  • 3834 views

Hi, I am new with Fortigate. Fine product. But I have the follow challange.

I have 8 public ip addresses and one to assigen one public address to a guest lan.

Should I use Vdom's? What is the best way to accomplish this? using a Foritgate 100D

 

Thanks in advance.

    Best answer by ede_pfau

    hi,

    what you want to do is to change the source address of your WiFi hosts. This can be done with source NAT.

    Source NAT in FortiOS is configured with 'IP pools' (firewall objects).

    Step by step:

    1- create a new IP pool with just one public address, e.g. '1.2.3.4 - 1.2.3.4'

    2- create/modify a policy from 'SSID' to 'WAN', source address 'myWiFiclients', destination addr 'all', check NAT, check 'use dynamic pool', select the IP pool just created

    3- in order to make the FGT react to that public IP, define it as a secondary IP on the WAN interface.

     

    That's all.

    1 reply

    ede_pfau
    SuperUser
    ede_pfauAnswer
    SuperUser
    August 13, 2016

    hi,

    what you want to do is to change the source address of your WiFi hosts. This can be done with source NAT.

    Source NAT in FortiOS is configured with 'IP pools' (firewall objects).

    Step by step:

    1- create a new IP pool with just one public address, e.g. '1.2.3.4 - 1.2.3.4'

    2- create/modify a policy from 'SSID' to 'WAN', source address 'myWiFiclients', destination addr 'all', check NAT, check 'use dynamic pool', select the IP pool just created

    3- in order to make the FGT react to that public IP, define it as a secondary IP on the WAN interface.

     

    That's all.

    jd653687
    jd653687Author
    Visitor III
    August 20, 2016

    Great Ede, this is working just fine.

    Thanks

    Jan